CVE-2012-2735

Session fixation vulnerability in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote attackers to hijack web sessions via a crafted session cookie.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.9 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:S/C:P/I:P/A:N
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 59%
VendorProductVersion
trevor_mckaycumin
𝑥
≤ 0.1.5192-4
trevor_mckaycumin
0.1.3160-1
trevor_mckaycumin
0.1.4369-1
trevor_mckaycumin
0.1.4410-2
trevor_mckaycumin
0.1.4494-1
trevor_mckaycumin
0.1.4794-1
trevor_mckaycumin
0.1.4916-1
trevor_mckaycumin
0.1.5033-1
trevor_mckaycumin
0.1.5037-1
trevor_mckaycumin
0.1.5054-1
trevor_mckaycumin
0.1.5068-1
trevor_mckaycumin
0.1.5092-1
trevor_mckaycumin
0.1.5098-2
trevor_mckaycumin
0.1.5105-1
trevor_mckaycumin
0.1.5137-1
trevor_mckaycumin
0.1.5137-2
trevor_mckaycumin
0.1.5137-3
trevor_mckaycumin
0.1.5137-4
trevor_mckaycumin
0.1.5137-5
trevor_mckaycumin
0.1.5192-1
redhatenterprise_mrg
2.0
𝑥
= Vulnerable software versions